[exim] SQLite Tainted filename for search error

Top Page
Delete this message
Reply to this message
Author: Max Kostikov
Date:  
To: Jeremy Harris via Exim-users
Subject: [exim] SQLite Tainted filename for search error
Hi!

After upgrade to Exim 4.94 I've got SQLite database access errors:

2020-06-06 01:02:28 Tainted filename for search:
'/var/db/exim/users.sqlite3'
2020-06-06 01:02:28 failed to expand "${lookup
sqlite{/var/db/exim/users.sqlite3 SELECT domain FROM domain WHERE
domain='${quote_sqlite:$domain}' AND backupmx='0' AND active='1'}}"
while checking a list: NULL

Rollback to 4.93.0.4 solves issue.

System:
FreeBSD 12.1-RELEASE-p5 GENERIC


--
With best regards,
Max Kostikov

W: https://kostikov.co | DeltaChat: mk@???